WHAT IS CLAIMED IS: 

1 . A service comprising: 

determining that a mobile computer has lost connectivity to a first access 
point of a network; 

when the mobile computer roams to a second access point of the network, 
determining whether the second access point is authorized for secure 
communication and if so, 

releasing access to secure data on the network through the second access 

point. 

2. The service of Claim 1, wherein the service is undertaken by the mobile 
computer. 

3. The service of Claim 2, wherein the service is undertaken by a hypervisor 
in the mobile computer. 

4. The service of Claim 1 , wherein the service is undertaken by at least one 
network resource outside the mobile computer. 

5. The service of Claim 1, wherein the mobile computer is authenticated at 
the first access point, prior to losing connectivity thereto. 

6. The service of Claim 5 wherein releasing access to secure data on the 
network through the second access point comprises releasing access to a set of secure 
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data which differs from the secure data released when the mobile computer is connected 
to the first access point. 

7. A mobile computer, comprising: 
at least one processor; 

at least one wireless transceiver in communication with the processor, the 
processor executing logic including: 

determining whether a predetermined communication hardware 
event has occurred; and 

if a predetermined communication hardware event has occurred, 
selectively configuring the computer in a non-secure mode. 

8. The computer of Claim 7, wherein the computer cannot access secure data 
on the network while configured in said non-secure mode. 

9. The computer of Claim 7, wherein the computer can access a subset of the 
seucre data on the network while configured in said non-secure mode. 

10. The computer of Claim 7, wherein the predetermined hardware event is 
a disconnection from a wireless access point. 
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1 1 . The computer of Claim 7, wherein the computer is configured in the non- 
secure mode if the computer roams to an access point that is not authorized for secure 
data transmission. 

12. The computer of Claim 10, wherein the processor accesses a list of 
authorized access points to undertake the act of selectively configuring. 

13. The computer of Claim 10, wherein the processor receives a network 
signal from a wireless access point to indicate whether the wireless access point is an 
authorized access point to undertake the act of selectively configuring. 

14. A system including a mobile computer and a network including secure 
data, comprising: 

means for determining that the mobile computer has lost connectivity to 
a first access point of the network; 

means for determining whether a second access point of the network to 
which the mobile computer has roamed is authorized for secure communication; 
and 

means for permitting the mobile computer to access secure data on the 
network through the second access point. 



15. 

computer. 
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The system of Claim 14, wherein the means are embodied in the mobile 
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1 6. The system of Claim 1 5, wherein the means are embodied by a hypervisor 
in the mobile computer. 

17. The system of Claim 14, wherein the means are embodied by at least one 
network resource outside the mobile computer. 

18. The system of Claim 14, wherein the mobile computer is authenticated at 
the first access point, prior to losing connectivity thereto. 

19. A method comprising : 

establishing communication between a mobile computer and a network 
through an access point; and 

based on at least one of: a location, and an identification, of the access 
point, selectively granting the computer access to secure assets in the network. 

20. The method of Claim 19, wherein the act of selectively granting is 
undertaken by the mobile computer. 

21. The method of Claim 20, wherein the act of selectively granting is 
undertaken by a hypervisor in the mobile computer. 
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22. The method of Claim 19, wherein the computer is configured to access a 
first set of network assets when communicating through a first access point and a second 
set of network assets when communicating through a second access point. 



RPS920030244US1 



12 



